$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft File: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft (raw, json) Hash identifier: dltyAKsGf3awFX8VJLOGvBCHSH+UxJjE0Mtg7MKxEUM= Subject key identifier: 9D:E7:EA:4B:A1:5B:E9:43:62:CD:2C:A9:F6:09:F9:64:27:6F:E6:AB Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 0196718A51A0E01485771F5F94895455770C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft Manifest number: 0589 Signing time: Sat 26 Apr 2025 10:00:12 +0000 Manifest this update: Sat 26 Apr 2025 10:00:12 +0000 Manifest next update: Sun 27 Apr 2025 10:00:12 +0000 Files and hashes: 1: 7yfIJfmkQ3SPL6ztwHSsQEDFq7c.roa (hash: U9gIE3TvcsVcC8ANP/yj+2f+VDmJwysXxpIohNyNBO4=) 2: 9qU_RshPDt8npKa7LLuRKWJ4eFg.roa (hash: z8T4KAMz4z5WwuZ8X7hdFs4SqXVbIIq8ewPKx0LgVz8=) 3: DHpzmZTvBAxT-43rfcQUmYozPLE.roa (hash: i/1DwqMjkRxMvpb2yMahb4K0v+eBiFoV+4UTK3EmkHM=) 4: FXlMAg6Tns5ug0sX3I9sZGNNPD4.roa (hash: 8+nZr8pDoLQyj2zJ+3NpzXLge4WTT12/Die6DTWaVCs=) 5: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl (hash: lQGaz43PmgePQwfo2qbZZFZXJ5OMNr8fSD0BJaCaHgA=) 6: J2HRCNN0O3I0ylWoGdWNujol0fA.roa (hash: rPj3oS6cRki0EPapM96ljLrY07pTqQoIZWe0btTMRN0=) 7: J9j2CvBysh8u2qchqC04U88jGJI.roa (hash: dKYY7akDuUZCnCqtxKH5T0CE632it9L4dEWOD9HZVYY=) 8: Ly5l7uAGGOrfvlsGGnQdz0V4nKE.roa (hash: ZxmUNWDmKGotedZO8VKzz/Oj5QRxUTc3RwaJAGYeFSE=) 9: VT5NTSGEDx5EgUmkbl_9I7Gr6ZQ.roa (hash: zvMGZnTSXs7rRdgQq7BTWfaj5rzWax6QH5PVbXYcxAU=) 10: W59DcGyguLN9xrI-xcmxOY6QPgU.roa (hash: TMK7yyBOJ4UuNiD8jav69tHdXZ5JFay/bM1zEa400pw=) 11: ha25ToUc3hy6XpsOv66_KAAFZfg.roa (hash: 6tSFpWTb+Nw4ORwTVhnRDUK8QpvPm4RoA8MapI/2opw=) 12: nO2DISCKoX95cbSl-4IE1IdCmBM.roa (hash: RSdRSi7lQ1Dk0PK2vlKk4Ff47FnbPUTG14kEWbAzlVs=) 13: p10y8t_WBLoKxkKhbrvVO3CBo7s.roa (hash: bR+UE5G2Oqk8wUwtmF/tWOLA+Bc3PLN2bliUn37gDYg=) 14: wT7vmcLVhrxJsD9cpF_QsLflW0E.roa (hash: WkCXdJU0J3BkU37zXWAXQdEI632t1NHqwLrYDW6Qn/Y=) 15: wYgSIaQwBTuITHU0HBRQkglSG0E.roa (hash: qiaCjrygoBnt3D71M1yuQyzb1QgBc8U5I1dN3wTSJ/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 10:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:8a:51:a0:e0:14:85:77:1f:5f:94:89:54:55:77:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Apr 26 10:00:12 2025 GMT Not After : Apr 27 10:00:12 2025 GMT Subject: CN=9de7ea4ba15be94362cd2ca9f609f964276fe6ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:98:37:fd:48:58:29:7c:cb:b4:03:3d:6b:1a: 66:9e:58:15:79:fa:4a:a3:1f:8b:1b:5f:37:2f:74: 22:db:2a:41:ab:bc:6f:99:a9:c2:ea:9d:90:3b:33: cd:42:69:61:1a:ad:58:43:b0:96:57:7e:bb:b4:a1: 94:6f:9f:11:11:46:7d:a6:a3:d4:44:30:e6:eb:aa: c9:c2:c7:b8:cc:68:0c:a8:57:ff:5a:41:40:9c:f3: e2:91:06:4e:3e:1f:1e:89:9b:16:41:99:6d:a2:4d: 72:69:6d:84:84:ca:11:56:69:fb:b6:27:2d:a3:51: 20:c4:e4:62:99:72:70:83:0d:d7:4c:4d:40:b7:19: 13:af:be:9e:aa:3a:19:f8:1d:de:74:89:ca:51:c4: 65:b6:9a:2e:15:68:5a:9b:8f:f4:23:a5:0e:99:d0: 1e:03:ac:ce:34:74:22:3c:14:72:95:e6:cb:d7:09: 1c:ca:b8:d7:19:7d:09:a6:aa:45:5c:b6:2d:f9:e9: f8:09:b5:3a:ba:e6:34:d7:29:9f:32:16:bd:04:01: 99:e3:e8:51:20:66:e1:b4:92:f9:ec:fb:51:8f:05: 54:09:92:87:16:4b:b5:e7:82:b2:83:c0:38:ba:3c: f2:6f:a1:66:7c:1d:b9:d2:b8:c4:f2:11:01:f3:36: 1b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E7:EA:4B:A1:5B:E9:43:62:CD:2C:A9:F6:09:F9:64:27:6F:E6:AB X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:28:55:ca:b8:72:33:a4:6e:65:42:d9:74:5d:fe:ed:1e:e7: 08:00:a2:76:b3:36:b9:58:05:d2:fb:bd:ea:2d:14:4d:63:37: ef:f6:db:2c:55:b2:07:53:a7:bd:6c:9e:af:4b:8f:40:9e:0a: 1c:4e:8e:cc:77:17:95:6c:ba:01:fa:7b:2d:88:d1:32:c5:b7: 91:ac:95:68:58:d4:7d:94:87:60:f4:0d:18:36:23:ef:c5:60: c0:46:09:0e:00:a9:02:b0:0f:dc:79:e6:88:f4:6c:d9:72:3d: d1:f7:66:b6:0f:14:84:40:4c:0e:43:81:44:4f:a3:e0:60:73: d9:8e:d2:3b:d6:33:14:89:54:47:a5:c9:39:9b:27:6e:71:09: 4a:00:8f:42:73:b3:33:38:2e:d1:5d:74:9f:ea:66:64:0a:6b: d2:a1:66:9d:72:55:2d:f7:dd:27:45:71:11:aa:e5:4c:d9:fe: 3d:0c:5a:8a:71:b8:ab:fb:41:43:f3:da:84:32:22:63:17:3b: c1:9a:ef:63:48:ab:f6:0e:96:db:f9:9a:98:9c:20:4b:e7:ab: 78:8b:57:06:ed:d5:31:63:a1:be:f4:5e:81:e3:e4:8c:44:e8: d2:27:3a:69:f9:ab:53:41:00:3f:05:1d:9b:3b:49:b0:3c:2f: 04:5a:ab:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZxilGg4BSFdx9flIlUVXcMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjUwNDI2MTAwMDEyWhcNMjUwNDI3MTAwMDEyWjAzMTEwLwYDVQQD Eyg5ZGU3ZWE0YmExNWJlOTQzNjJjZDJjYTlmNjA5Zjk2NDI3NmZlNmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupg3/UhYKXzLtAM9axpmnlgVefpK ox+LG183L3Qi2ypBq7xvmanC6p2QOzPNQmlhGq1YQ7CWV367tKGUb58REUZ9pqPU RDDm66rJwse4zGgMqFf/WkFAnPPikQZOPh8eiZsWQZltok1yaW2EhMoRVmn7tict o1EgxORimXJwgw3XTE1AtxkTr76eqjoZ+B3edInKUcRltpouFWham4/0I6UOmdAe A6zONHQiPBRylebL1wkcyrjXGX0JpqpFXLYt+en4CbU6uuY01ymfMha9BAGZ4+hR IGbhtJL57PtRjwVUCZKHFku154Kyg8A4ujzyb6FmfB250rjE8hEB8zYbvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3n6kuhW+lDYs0sqfYJ+WQnb+arMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiChVyrhy M6RuZULZdF3+7R7nCACidrM2uVgF0vu96i0UTWM37/bbLFWyB1OnvWyer0uPQJ4K HE6OzHcXlWy6Afp7LYjRMsW3kayVaFjUfZSHYPQNGDYj78VgwEYJDgCpArAP3Hnm iPRs2XI90fdmtg8UhEBMDkOBRE+j4GBz2Y7SO9YzFIlUR6XJOZsnbnEJSgCPQnOz Mzgu0V10n+pmZApr0qFmnXJVLffdJ0VxEarlTNn+PQxainG4q/tBQ/PahDIiYxc7 wZrvY0ir9g6W2/mamJwgS+ereItXBu3VMWOhvvRegePkjETo0ic6afmrU0EAPwUd mztJsDwvBFqrlg== -----END CERTIFICATE-----Generated at Sat Apr 26 19:03:57 2025 by rpki-client